Overview

overview

10

Static

static

10

NEAS.06fd0...90.exe

windows7-x64

3

NEAS.06fd0...90.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231025-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/11/2023, 13:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.06fd0084c39427befc607df352fd2490.exe

  • Size

    272KB

  • MD5

    06fd0084c39427befc607df352fd2490

  • SHA1

    d0c554479ba6fe237c6ba974c5a50cf9ddad3ac1

  • SHA256

    2fa0a4590092f3493cc4914727cdd8738d76393dcf301ea0ff5c6aea843e5fdd

  • SHA512

    8d6882143821897c83691fa4cfc8469439042e33cf827a181deceb15550788e6370fe5b5466480370ce9bae6fb27986e5330a8cb0d7cf02c0aed896a0b79ae30

  • SSDEEP

    3072:uRABfq8uVqZ2fQkbn1vVAva63HePH/RAPJ:uqfq8ug4fQkjxqvak+PH/RAR

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.06fd0084c39427befc607df352fd2490.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.06fd0084c39427befc607df352fd2490.exe"
    1⤵
      PID:4448
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4448 -s 228
        2⤵
        • Program crash
        PID:1964
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4448 -ip 4448
      1⤵
        PID:1548

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4448-0-0x0000000000400000-0x0000000000444000-memory.dmp

        Filesize

        272KB

        Download